Suspicious SMB Ransomware Propagation Attempt

Many ransomwares utilize the SMB protocol for propagation of their malicious code. A successful attack may lead to the encryption of the target device and other devices on the network...

Suspicious JavaScript Web Evasions

Certain evasion can use JavaScript code in order to circumvent inspection by security software. An attacker could use such evasion methods in order to execute arbitrary code on the target...

Metasploit Multiple Browsers Obfuscation Technique

Remote attackers can use metasploit modules in order to check for potential browser vulnerabilities on a target client. This information can later be used for attacks...

Apache Solr xmlparser XML External Entity Expansion Remote Code Execution (CVE-2017-12629)

An XML external entity expansion vulnerability exists in Apache Solr. The vulnerability is due to improper handling of XML external entities in user submitted XML content. A remote attacker can exploit this vulnerability by submitting a crafted request to the target server...

Apache httpd mod_auth_digest Memory Access Denial of Service (CVE-2017-9788)

A memory access error exists in Apache httpd. This vulnerability is due to an error in accessing uninitialized memory and failing to reset it while processing Authorization and Proxy-Authorization HTTP headers. A remote, unauthenticated attacker could exploit this vulnerability by sending...

Mozilla Firefox URL Long user name Denial Of Service (CVE-2017-7783)

A denial-of-service vulnerability exists in Mozilla Firefox. Mozilla Firefox fails to properly process a combination of username and password inside the URL. A remote attacker could exploit this vulnerability by persuading a target user to open a specially crafted html site...

TVT CCTV Remote Code Execution

A remote code execution vulnerability is exist in TVT devices. Successful exploitation could result in arbitrary code execution on the CCTV-DVR machine...

DNSmasq Integer Underflow Denial Of Service (CVE-2017-13704)

An integer underflow vulnerability exists over Dnsmasq. This is due to the way Dnsmasq handles TTL requests. A successful attack could lead to a denial of service...

Adobe Acrobat and Reader Information Disclosure (APSB17-11: CVE-2017-3043)

An information disclosure vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while collaboration functionality when opening any cloud file followed by invocation of share file function. Attackers can exploit the vulnerability by...

Microsoft Edge Chakra ParseCatch Type Confusion (CVE-2017-11764)

A type confusion vulnerability exists in Microsoft Edge Chakra JavaScript Engine. The vulnerability is due to a lack of validation in the ParseCatch method which results in the generation on a malformed Abstract Syntax Tree AST. A remote attacker could exploit this vulnerability by enticing the...

Microsoft Windows SMB Server SMBv1 Out of Bounds Read (CVE-2017-11781)

An out of bounds read vulnerability exists in the SMB Server component of Microsoft Windows. The vulnerability is due to improper handling of SMBv1 requests. A remote, authenticated attacker could exploit the vulnerability by sending a crafted SMBv1 request to a target SMB server...

Microsoft Windows Search Information Disclosure (CVE-2017-11772)

An information disclosure exists in the Search component of Microsoft Windows. The vulnerability is due to how Windows Search handles objects in memory. A remote attacker can exploit this vulnerability by sending specially crafted messages to the Windows Search service...

Technicolor TD5336 Router Remote Code Execution (CVE-2017-14127)

A remote code execution vulnerability is exist in Technicolor router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

Microsoft Edge DoLoopBodyStart Out of Bounds Read (CVE-2017-11811)

An out-of-bounds read vulnerability exists in Microsoft Edge. The vulnerability is due to improper handling of objects in memory...

Vacron NVR Remote Code Execution

A remote code execution vulnerability is exist in Vacron devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

Microsoft Windows Remote Desktop Protocol Scanning Attempt

RDP Scanner is a vulnerability scanning product. Remote attackers can use RDP Scanner to detect vulnerabilities on a target server...

Google Chrome V8 Remote Code Execution (CVE-2017-5121)

A memory corruption vulnerability exists in Google chrome v8 engine. The vulnerability is due to a bad handling of object definition. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web page. Successful exploitation could allow an attacker to...

Microsoft Office DDE Remote Code Execution

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to the DDE feature that allows an Office application to load data from other Office applications. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted ema...

NETGEAR DGN Command Injection

A command injection vulnerability exists in NETGEAR DGN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

D-Link DIR-600/300 Router Unauthenticated Remote Command Execution

A remote code execution vulnerability exists in D-Link DIR-600, DIR-300 routers. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

Netgear ReadyNAS Remote Command Execution

A remote command execution vulnerability exists within Netgear ReadyNAS devices. This vulnerability is due to the way Netgear ReadyNAS handles upload requests. A successful attack could lead to a remote command execution...

Dnsmasq DHCPv6 Remote Unauthenticated Information Disclosure (CVE-2017-14494)

A information disclosure vulnerability exists over Dnsmasq. This is due to lack of proper validation of an user-supplied request packet. A successful attack could result in information disclosure...

IBM Lotus Notes encodeURI DOS (CVE-2017-1129)

A denial of service vulnerability exists in IBM Lotus Notes. A remote attacker can exploit this vulnerability by sending a specially crafted message to an affected system...

D-Link DIR800 Series Router Remote Code Execution

A remote code execution vulnerability is exist in D-Link DIR800 series router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

D-Link DIR800 Series Router Information Disclosure

An information disclosure vulnerability exists in D-Link DIR800 series router. Successful exploitation of this vulnerability would allow remote attackers to gain access to sensitive information and gain unauthorized access into the affected system...

D-Link 850L Router Remote Code Execution

A remote code execution vulnerability is exist in D-Link 850l router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

D-Link 850L Router Cookie Overflow Remote Code Execution (CVE-2016-5681)

There exists a Remote Code Execution vulnerability within D-Link 850L Routers. This is due to the way the D-Link Routers handle cookie validation. A successful attack could lead to unauthorized remote code execution...

Microsoft Windows Kernel NtQueryObject Information Disclosure (CVE-2017-11785)

An information disclosure vulnerability exists within Microsoft Windows. The vulnerability is caused when Microsoft Windows kernel improperly handles objects in memory. Successful exploitation allows the attacker to retrieve information that could lead to a Kernel ASLR bypass...

Microsoft Windows DNSAPI NSEC3 Heap-based Buffer Overflow (CVE-2017-11779)

A heap-based buffer overflow vulnerability exists in the DNSAPI component of Microsoft Windows. The vulnerability is due to insufficient validation of certain components of NSEC3 records. A remote attacker could exploit this vulnerability by sending a malicious DNS response directly to the target...

DNN Cookie Deserialization Remote Code Execution (CVE-2017-9822)

An object deserialization vulnerability exists in DotNetNuke web content management system. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted file to the web application...

D-Link 850L Router Remote Unauthenticated Information Disclosure

There exists a Information Disclosure vulnerability within D-Link 850L Routers. This is due to the way the D-Link Routers handle information requests. A successful attack could lead to information disclosure...

Dnsmasq DHCPv6 Stack Buffer Overflow Remote Code Execution (CVE-2017-14493)

A stack buffer overflow vulnerability exists over Dnsmasq. This is due to the way Dnsmasq handles TTL requests. A successful attack could lead to an arbitrary code execution...

Rancher Server Docker Command Execution

A command execution vulnerability exist in Rancher Server Docker. The vulnerability is due to improper privilege handling. A remote attacker can exploit this issue by sending a malicious HTTP request to the target server that could result in command injection and execution...

Adobe Flash Player Type Confusion (APSB17-32: CVE-2017-11292)

A type confusion vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11799)

A Memory Corruption Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine in Edge renders when handling objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Schneider Electric U.motion Builder nfcserver.php SQL Injection (CVE-2017-7973)

An SQL injection vulnerability exists in Schneider Electric U.motion Builder. The vulnerability is due to insufficient validation of the sessionid HTTP request parameter in requests made to nfcserver.php.A remote, unauthenticated user can exploit this vulnerability by sending a crafted HTTP reque...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11809)

A Memory Corruption Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11802)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge handles objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Cisco License Manager Server ReportCSV Directory Traversal (CVE-2017-12263)

An information disclosure vulnerability exists in Cisco License Manager Server. The vulnerability is due to insufficient validation on user supplied paths when a request is sent to ReportCSV servlet. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to...

Microsoft Device Guard Security Feature Bypass (CVE-2017-11823)

A security feature bypass vulnerability has been reported in Microsoft Windows Device Guard. The vulnerability is due to the way Device Guard improperly validates certain elements of a signed PowerShell script. A remote attacker could exploit this vulnerability by enticing a target user to open a...

Apache HTTP OptionsBleed Memory Leak Scanner (CVE-2017-9798)

OptionsBleed Scanner is a vulnerability scanning product. Remote attackers can use OptionsBleed Scanner to detect vulnerabilities on a target server...

OpenVPN read_key Stack Based Buffer Overflow (CVE-2017-12166)

A stack-based buffer overflow vulnerability exists in OpenVPN. The vulnerability is due to a lack of bounds check on the length of key and HMAC lengths provided by the client. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted PCONTROLV1 message to a target...

Microsoft Office Memory Corruption (CVE-2017-11826)

A remote code execution vulnerability exists in Microsoft Word. The vulnerability is due to an error in Microsoft Word that fails to properly parse the file format. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted file...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11798)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge handles objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Microsoft Win32k Elevation of Privilege (CVE-2017-8689)

An elevation of privilege vulnerability exists in Windows Kernel-Mode Driver. The vulnerability is due to an error in the way Microsoft Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kern...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2017-11810)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way Microsoft Internet Explorer handles objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Microsoft Windows Graphics Remote Code Execution (CVE-2017-11762)

A remote code execution vulnerability exists in Windows font library. The vulnerability is due to an error in the way Microsoft Windows font library improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a...

Microsoft Internet Explorer Memory Corruption (CVE-2017-11822)

A memory corruption vulnerability exists in Internet Explorer. The vulnerability is due to an error when handling objects in memory. A remote attacker can exploit this vulnerability and execute arbitrary code in the context of the current user...

Microsoft Windows Shell Memory Corruption (CVE-2017-8727)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way Microsoft Internet Explorer handles objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2017-11793)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way Microsoft Internet Explorer handles objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...